]>
granicus.if.org Git - php/log
Sammy Kaye Powers [Fri, 23 May 2014 05:34:44 +0000 (05:34 +0000)]
Added tests for ZipArchive::addGlob() and ZipArchive::addPattern()
Adam Harvey [Thu, 22 May 2014 22:36:55 +0000 (22:36 +0000)]
Fix run-tests.php with Valgrind >= 3.10.0.
The version test that we had in run-tests.php assumed that the major and minor
version numbers were always single digits. This removes that assumption and
also uses version_compare() for the comparison instead of naively converting it
to an integer.
Adam Harvey [Wed, 21 May 2014 19:55:09 +0000 (14:55 -0500)]
Add microseconds to the serialised form of DateTime objects.
Fixes bug #67308 (Serialize of DateTime truncates fractions of second).
Matteo Beccati [Wed, 21 May 2014 16:58:14 +0000 (18:58 +0200)]
Improved test for bug #62479
Stanislav Malyshev [Mon, 19 May 2014 06:43:59 +0000 (23:43 -0700)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
fix typo in ODBC code
Fix bug #67060: use default mode of 660
Conflicts:
ext/odbc/php_odbc.c
Stanislav Malyshev [Mon, 19 May 2014 06:42:30 +0000 (23:42 -0700)]
fix typo in ODBC code
Stanislav Malyshev [Wed, 14 May 2014 05:20:15 +0000 (22:20 -0700)]
5.4.30 next
Stanislav Malyshev [Wed, 14 May 2014 00:07:35 +0000 (17:07 -0700)]
update NEWS
Stanislav Malyshev [Tue, 13 May 2014 23:52:17 +0000 (16:52 -0700)]
Merge branch 'bug67251' into PHP-5.4
* bug67251:
Fix bug #67251 - date_parse_from_format out-of-bounds read
Conflicts:
ext/date/lib/parse_date.c
Stanislav Malyshev [Tue, 13 May 2014 23:44:24 +0000 (16:44 -0700)]
Merge branch 'bug67252' into PHP-5.4
* bug67252:
fix bug #67253: timelib_meridian_with_check out-of-bounds read
Fix bug #67252: convert_uudecode out-of-bounds read
Stanislav Malyshev [Tue, 13 May 2014 23:42:23 +0000 (16:42 -0700)]
Merge branch 'bug67250' into PHP-5.4
* bug67250:
Fix bug #67250 (iptcparse out-of-bounds read)
Derick Rethans [Tue, 13 May 2014 15:36:58 +0000 (16:36 +0100)]
- Updated to version 2014.3 (2014c)
Stanislav Malyshev [Mon, 12 May 2014 17:53:45 +0000 (10:53 -0700)]
fix test - output can be chunked
Stanislav Malyshev [Tue, 15 Apr 2014 17:43:24 +0000 (10:43 -0700)]
Fix bug #67060: use default mode of 660
Stanislav Malyshev [Mon, 12 May 2014 04:09:11 +0000 (21:09 -0700)]
fix bug #67253: timelib_meridian_with_check out-of-bounds read
Stanislav Malyshev [Mon, 12 May 2014 03:29:27 +0000 (20:29 -0700)]
Fix bug #67252: convert_uudecode out-of-bounds read
Stanislav Malyshev [Mon, 12 May 2014 02:34:21 +0000 (19:34 -0700)]
Fix bug #67251 - date_parse_from_format out-of-bounds read
Stanislav Malyshev [Mon, 12 May 2014 02:09:19 +0000 (19:09 -0700)]
Fix bug #67250 (iptcparse out-of-bounds read)
Stanislav Malyshev [Mon, 12 May 2014 00:54:27 +0000 (17:54 -0700)]
Fix bug #67247 spl_fixedarray_resize integer overflow
Stanislav Malyshev [Mon, 12 May 2014 00:43:28 +0000 (17:43 -0700)]
fix news
Bob Weinand [Sun, 11 May 2014 13:13:40 +0000 (15:13 +0200)]
Updated NEWS
Bob Weinand [Sun, 11 May 2014 13:11:03 +0000 (15:11 +0200)]
Fix Linux specific fail in error traces (cherry-picked and fix for bug #67245)
Linux apparently does not like memcpy in overlapping regions...
Felipe Pena [Sun, 11 May 2014 12:45:17 +0000 (09:45 -0300)]
- Fixed off-by-one in phar_build (patch by crrodriguez at opensuse dot org)
Felipe Pena [Sat, 10 May 2014 14:55:42 +0000 (11:55 -0300)]
- Move checking
Felipe Pena [Sat, 10 May 2014 14:53:40 +0000 (11:53 -0300)]
- Fixed missing NULL check in SimpleXMLElement::xpath()
Felipe Pena [Sat, 10 May 2014 14:39:08 +0000 (11:39 -0300)]
- Fixed missing NULL check
Stanislav Malyshev [Thu, 8 May 2014 08:59:39 +0000 (01:59 -0700)]
oops, 5.4 and 5.5 use malloc in TSRM
Stanislav Malyshev [Wed, 7 May 2014 20:28:03 +0000 (13:28 -0700)]
Fix memory leak in TSRM
Dmitry Stogov [Thu, 10 Apr 2014 08:14:11 +0000 (12:14 +0400)]
Fixed test (it requires ext/hash)
Dmitry Stogov [Fri, 11 Apr 2014 08:43:35 +0000 (12:43 +0400)]
Fixed tests (they might fail from time to time because of session GC)
Adam Harvey [Fri, 2 May 2014 17:23:09 +0000 (10:23 -0700)]
Fix author name on the #63228 patch.
Adam Harvey [Thu, 1 May 2014 18:21:34 +0000 (11:21 -0700)]
Use the right path for the suggested PHP invocation in ext_skel.
Fixes bug #67160 (ext_skel outputs incorrect information).
Ferenc Kovacs [Thu, 1 May 2014 08:50:08 +0000 (10:50 +0200)]
add missing NEWS entry to the correct release where it was added
Stanislav Malyshev [Tue, 15 Apr 2014 17:43:24 +0000 (10:43 -0700)]
Fix bug #67060: use default mode of 660
Anatol Belski [Tue, 29 Apr 2014 11:40:44 +0000 (13:40 +0200)]
Fixed bug #66431 Special Character via COM Interface (CP_UTF8)
Popa Adrian Marius [Mon, 28 Apr 2014 09:13:11 +0000 (12:13 +0300)]
Merge branch 'PHP-5.3' into PHP-5.4
* PHP-5.3:
Cleanup ZEND_MODULE_API_NO =>
20050922
Popa Adrian Marius [Mon, 28 Apr 2014 09:12:52 +0000 (12:12 +0300)]
Cleanup ZEND_MODULE_API_NO =>
20050922
Anatol Belski [Fri, 25 Apr 2014 15:39:53 +0000 (17:39 +0200)]
fixed test
Anatol Belski [Fri, 25 Apr 2014 15:23:26 +0000 (17:23 +0200)]
Fixed bug #67118 DateTime constructor crash with invalid data
Stanislav Malyshev [Fri, 25 Apr 2014 06:58:38 +0000 (23:58 -0700)]
add a test case previously broken by a bad fix
Stanislav Malyshev [Fri, 25 Apr 2014 06:49:52 +0000 (23:49 -0700)]
Revert "Fixed bug #64604"
This reverts commit
b05c088a3abf8e4c6fb6e40418423a9e2dd3d929 .
Breaks parsing urls where query has : in it, like: /foo/bar?baz=goo:boo
Anatol Belski [Thu, 24 Apr 2014 08:51:42 +0000 (10:51 +0200)]
fix dll export
Jakub Zelenka [Mon, 21 Apr 2014 12:02:20 +0000 (13:02 +0100)]
Fix accepting ill-formed UTF-8 characters
Conflicts:
ext/phar/phar_path_check.c
Danack [Thu, 13 Feb 2014 14:48:51 +0000 (14:48 +0000)]
Allow valid multi-byte utf-8 characters to be allowed as file names in phar archives.
Rouven Weßling [Mon, 24 Feb 2014 13:45:42 +0000 (14:45 +0100)]
Fix a compiler warning in php_rand.h
Julio Pintos [Fri, 14 Mar 2014 19:47:30 +0000 (16:47 -0300)]
Fix #66908: php-fpm reload leaks epoll_create() file descriptor
This patch fixes descriptor leak which could lead to DoS once Max open files is reached
Boro Sitnikovski [Mon, 14 Apr 2014 08:02:11 +0000 (10:02 +0200)]
Fix bug #65701: Do not use cache for file file copy
Anatol Belski [Fri, 18 Apr 2014 13:43:05 +0000 (15:43 +0200)]
UPGRADING note about bug #67072
Anatol Belski [Fri, 18 Apr 2014 13:13:32 +0000 (15:13 +0200)]
Improved the fix for bug #67072, thanks Nikita
Levi Morrison [Thu, 17 Apr 2014 14:46:38 +0000 (08:46 -0600)]
These links to ~helly don't work anymore.
Anatol Belski [Thu, 17 Apr 2014 08:48:14 +0000 (10:48 +0200)]
Fixed bug #67072 Echoing unserialized "SplFileObject" crash
The actual issue lays in the unserializer code which doesn't honor
the unserialize callback. By contrast, the serialize callback is
respected. This leads to the situation that even if a class has
disabled the serialization explicitly, user could still construct
a vulnerable string which would result bad things when trying
to unserialize.
This conserns also the classes implementing Serializable as well
as some core classes disabling serialize/unserialize callbacks
explicitly (PDO, SimpleXML, SplFileInfo and co). As of now, the
flow is first to call the unserialize callback (if available),
then call __wakeup. If the unserialize callback returns with no
success, no object is instantiated. This makes the scheme used
by internal classes effective, to disable unserialize just assign
zend_class_unserialize_deny as callback.
Anatol Belski [Wed, 16 Apr 2014 13:06:57 +0000 (15:06 +0200)]
correct the bug #67081 fix
Anatol Belski [Wed, 16 Apr 2014 12:13:45 +0000 (14:13 +0200)]
Fixed bug #67081 DOMDocumentType->internalSubset returns entire DOCTYPE tag, not only the subset
Stanislav Malyshev [Tue, 15 Apr 2014 23:51:38 +0000 (16:51 -0700)]
5.4.29 is next
Stanislav Malyshev [Mon, 14 Apr 2014 22:43:32 +0000 (15:43 -0700)]
Fix test - on CI somebody could create a process in the meantime
Anatol Belski [Mon, 14 Apr 2014 21:29:38 +0000 (23:29 +0200)]
fix windows build
Chuan Ma [Tue, 25 Mar 2014 03:24:41 +0000 (23:24 -0400)]
Fix #66942: openssl_seal() memory leak
Fix #66952: memory leak in openssl_open()
Stanislav Malyshev [Mon, 14 Apr 2014 20:16:53 +0000 (13:16 -0700)]
ws fix
Stanislav Malyshev [Mon, 14 Apr 2014 03:43:46 +0000 (20:43 -0700)]
Fix null byte in LDAP bindings
Stanislav Malyshev [Mon, 14 Apr 2014 03:31:20 +0000 (20:31 -0700)]
Fix bug #66171: better handling of symlinks
Anatol Belski [Mon, 14 Apr 2014 14:31:18 +0000 (16:31 +0200)]
backported some ext/intl tests from 5.6 into 5.4
Anatol Belski [Mon, 14 Apr 2014 07:32:31 +0000 (09:32 +0200)]
Fixed bug #67033 Remove reference to Windows 95
Stanislav Malyshev [Mon, 14 Apr 2014 03:16:27 +0000 (20:16 -0700)]
fix NEWS
Stanislav Malyshev [Mon, 14 Apr 2014 01:50:39 +0000 (18:50 -0700)]
Merge branch 'pull-request/518' into PHP-5.4
* pull-request/518:
Fix #66021 (Blank line inside empty array/object)
Ingo Walz [Sat, 23 Nov 2013 01:31:23 +0000 (02:31 +0100)]
Fixed bug #64604
Freek [Tue, 28 Jan 2014 10:47:14 +0000 (11:47 +0100)]
Fix #66562: Consistency bug where curl_multi_getcontent behaves different from curl_exec
curl_exec returns an empty string when data is received from a domain that returns zero content. curl_multi_getcontent
returned null. Now it returns an empty string fixing the incosistency
itxx00 [Thu, 16 Jan 2014 08:34:39 +0000 (16:34 +0800)]
Fix bug #66482, replace wrong item name 'priority' with 'process.priority' in php-fpm.conf
Stanislav Malyshev [Mon, 14 Apr 2014 00:02:21 +0000 (17:02 -0700)]
Fix windows build
Boro Sitnikovski [Mon, 17 Feb 2014 00:07:52 +0000 (01:07 +0100)]
Fix bug #66721
Add NULL check to php_date_parse_tzfile's retval
Jeff Trawick [Sun, 13 Apr 2014 20:37:16 +0000 (16:37 -0400)]
Gabor Buella [Fri, 4 Apr 2014 22:17:25 +0000 (00:17 +0200)]
Fixed bug #67024 - getimagesize should recognize BMP files with negative height
Bob Weinand [Sun, 13 Apr 2014 21:01:31 +0000 (23:01 +0200)]
Reverted to
5a0da281e5a9fa02db18b4822d8b103c65849fa9
Discussion: http://news.php.net/php.cvs/76836
Bob Weinand [Sun, 13 Apr 2014 17:34:17 +0000 (19:34 +0200)]
Forgot title in phpt for bug #67064
Bob Weinand [Sun, 13 Apr 2014 17:32:51 +0000 (19:32 +0200)]
Updated NEWS
Bob Weinand [Sun, 13 Apr 2014 17:19:24 +0000 (19:19 +0200)]
Fix bug #67064 in a BC safe way
You can use an optional parameter now when implementing the Countable interface
to get the $mode passed to count().
Ferenc Kovacs [Sat, 12 Apr 2014 23:55:55 +0000 (01:55 +0200)]
fix typo
Bob Weinand [Sat, 12 Apr 2014 21:50:47 +0000 (23:50 +0200)]
Made usage of php_hash_environment useful by updating instead of just adding argc
Popa Adrian Marius [Thu, 10 Apr 2014 14:42:32 +0000 (17:42 +0300)]
Cleanup $ is not needed for git
Ferenc Kovacs [Thu, 10 Apr 2014 05:05:07 +0000 (07:05 +0200)]
fix typo
Ferenc Kovacs [Wed, 9 Apr 2014 17:01:01 +0000 (19:01 +0200)]
abstract namespace for unix sockets is a linux only feature
Popa Adrian Marius [Tue, 8 Apr 2014 12:29:32 +0000 (15:29 +0300)]
cleanup
Popa Adrian Marius [Tue, 8 Apr 2014 11:11:58 +0000 (14:11 +0300)]
Fixes bug #66071: isc_interprete is unsafe and deprecated , it is replaced with fb_iterpret
Anatol Belski [Sat, 5 Apr 2014 07:46:24 +0000 (09:46 +0200)]
Fixed bug #66084 simplexml_load_string() mangles empty node name
Stanislav Malyshev [Thu, 3 Apr 2014 22:53:43 +0000 (15:53 -0700)]
cleanup NEWS
Michael Wallner [Thu, 3 Apr 2014 08:40:06 +0000 (10:40 +0200)]
Fix Bug #66736 fpassthru broken
Michael Wallner [Thu, 3 Apr 2014 07:07:35 +0000 (09:07 +0200)]
Fix bug #66182 exit in stream filter produces segfault
Unfortunately, a segv caused by exit cannot be tested reliably.
Michael Wallner [Wed, 2 Apr 2014 13:36:39 +0000 (15:36 +0200)]
Fixed bug #61019 (Out of memory on command stream_get_contents)
Michael Wallner [Wed, 2 Apr 2014 09:09:26 +0000 (11:09 +0200)]
Fix bug #64330
stream_socket_server() creates wrong Abstract Namespace UNIX sockets
Anatol Belski [Tue, 1 Apr 2014 08:11:40 +0000 (10:11 +0200)]
updated NEWS
Anatol Belski [Tue, 1 Apr 2014 08:08:08 +0000 (10:08 +0200)]
added test for bug #53965
Anatol Belski [Tue, 1 Apr 2014 08:07:18 +0000 (10:07 +0200)]
Fixed bug #53965 <xsl:include> cannot find files w/ relative paths when loaded w/ "file://"
Remi Collet [Mon, 31 Mar 2014 14:57:02 +0000 (16:57 +0200)]
NEWS
Remi Collet [Mon, 31 Mar 2014 14:50:47 +0000 (16:50 +0200)]
Fixed Bug #66987 Memory corruption in fileinfo ext (bigendian)
On little endian:
map->p == php_magic_database
map->magic[i] = pointer into the map
map->p == NULL
map->magic[i] = pointer to allocated memory
On big endian (ppc64, s390x, ...):
map->p != php_magic_database and map->p != NULL
map->magic[i] = pointer into a copy of the map
Trying to efree pointer in the later cause memory corruption
Thanks to dkatulek / Red Hat for the report.
Anatol Belski [Thu, 27 Mar 2014 17:18:06 +0000 (18:18 +0100)]
update lib versions
Derick Rethans [Tue, 25 Mar 2014 12:17:14 +0000 (12:17 +0000)]
- Updated to version 2014.2 (2014b)
Remi Collet [Tue, 25 Mar 2014 10:00:47 +0000 (11:00 +0100)]
NEWS
Remi Collet [Tue, 25 Mar 2014 10:00:33 +0000 (11:00 +0100)]
Fixed bug #66946 extensive backtracking in awk rule regular expression
CVE-2013-7345
Applied upstream patch:
https://github.com/file/file/commit/
ef2329cf71acb59204dd981e2c6cce6c81fe467c
Add the magicdata.patch to track patches applied to upstream data file.
Remi Collet [Tue, 25 Mar 2014 09:58:50 +0000 (10:58 +0100)]
Fixed bug #66946 extensive backtracking in awk rule regular expression
CVE-2013-7345
Applied upstream patch:
https://github.com/file/file/commit/
ef2329cf71acb59204dd981e2c6cce6c81fe467c
Add the magicdata.patch to track patches applied to upstream data file.
Anatol Belski [Mon, 24 Mar 2014 18:15:02 +0000 (19:15 +0100)]
more fixes related to bug #65715
Anatol Belski [Mon, 24 Mar 2014 09:28:21 +0000 (10:28 +0100)]
updated NEWS